Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          v7q+6OecXAYcyGnX2CrKc2sUM8uuIwL3T5NIQDpi1pk=
Subject key identifier:   A7:0F:E1:D0:47:3D:4C:20:52:99:36:3F:45:7C:F1:4B:3E:C1:46:A3
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       0BA668D6B7C1A9192DE24EC9B9DA03D1DC090948
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:42:27 +0000
ROA not before:           Wed 11 May 2022 17:37:27 +0000
ROA not after:            Wed 10 May 2023 17:42:27 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a6:68:d6:b7:c1:a9:19:2d:e2:4e:c9:b9:da:03:d1:dc:09:09:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:37:27 2022 GMT
            Not After : May 10 17:42:27 2023 GMT
        Subject: CN=A70FE1D0473D4C205299363F457CF14B3EC146A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:4d:49:50:12:3e:13:87:c9:d5:20:72:62:
                    62:32:d0:9b:3c:f9:26:f2:0b:e1:6d:9a:ca:1e:59:
                    f3:1b:49:df:49:8c:84:ae:92:16:c4:4b:07:9f:5c:
                    67:86:e4:a5:26:c9:bd:25:0d:25:d1:9d:67:1e:cf:
                    73:4e:c4:2e:09:7e:37:86:32:ff:79:f9:cd:46:e3:
                    4f:1a:a2:bf:c3:0c:c6:0a:d5:51:23:36:50:0f:e2:
                    2e:a5:8b:a0:a9:c7:f0:52:f9:d3:69:5f:8d:26:85:
                    5b:71:39:e7:b8:57:87:a9:03:9b:13:0f:58:1a:58:
                    cf:c8:d8:25:f2:08:53:bf:bc:20:30:d8:4c:cc:0c:
                    2c:65:13:88:11:5c:45:da:db:d1:ce:8b:d3:20:cd:
                    f6:2e:e2:54:e9:c4:d2:ec:a3:7c:e1:c3:99:5e:71:
                    af:59:04:e6:6b:28:38:94:bd:20:29:4b:23:a6:b0:
                    7c:78:29:eb:a3:1c:cf:34:a0:94:74:52:43:60:8e:
                    f7:18:57:90:a2:e1:01:e9:87:69:f3:21:7a:21:db:
                    35:ec:68:90:7f:6f:92:14:92:3c:b7:11:bb:78:23:
                    45:37:fe:51:85:cf:9b:27:9d:6e:4e:6a:3f:e8:f2:
                    05:32:0c:05:8c:1a:28:a6:90:31:8b:67:1d:34:16:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0F:E1:D0:47:3D:4C:20:52:99:36:3F:45:7C:F1:4B:3E:C1:46:A3
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:72:e9:22:b0:34:40:5c:de:a5:6a:fc:fc:57:99:e7:4a:a7:
         7a:d5:a1:da:6f:be:94:db:64:a2:8b:b5:03:ab:d9:1a:1f:1f:
         f6:dc:34:b3:10:aa:87:1a:5f:f6:ca:3e:bb:a7:81:f2:14:71:
         e5:49:03:a6:b3:53:7e:a1:40:7c:7c:d7:cf:a1:27:4e:8d:7a:
         f0:41:6c:0a:80:8e:e3:ed:52:b9:bb:2e:9f:74:c1:3c:5a:cc:
         7a:f0:0f:00:c4:7d:b9:8c:7a:73:64:1e:ab:f1:62:68:43:a4:
         2b:23:a2:c3:e1:91:e3:ef:f7:ef:7d:04:4d:c5:91:27:27:6a:
         c3:3c:fc:e4:14:3c:6e:e5:de:cc:8e:90:75:3e:9a:ac:23:1c:
         af:32:de:bb:02:50:93:1e:e0:95:0c:63:f7:41:61:3b:c1:8b:
         8b:ad:4a:96:7e:ed:0a:62:36:40:b3:aa:44:8e:bb:d2:fb:82:
         52:40:46:74:c6:d0:8f:c0:88:0f:94:e8:44:21:9e:e7:17:10:
         71:5e:e1:c9:fe:bf:e4:3b:2d:7e:95:ca:c0:92:81:54:2c:3a:
         ed:4f:38:71:19:ab:94:38:36:4b:6d:6a:59:19:80:93:84:1d:
         26:3c:86:0e:31:02:39:b8:51:09:38:94:22:22:f9:d1:02:14:
         70:7a:c0:8f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUC6Zo1rfBqRkt4k7JudoD0dwJCUgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjJiOGVhZjlmMGIyMWI1Zjg5MDMzOTBl
N2JhOGNhYmE5YTgxNjI4MDQwHhcNMjIwNTExMTczNzI3WhcNMjMwNTEwMTc0MjI3
WjAzMTEwLwYDVQQDEyhBNzBGRTFEMDQ3M0Q0QzIwNTI5OTM2M0Y0NTdDRjE0QjNF
QzE0NkEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2pNSVASPhOH
ydUgcmJiMtCbPPkm8gvhbZrKHlnzG0nfSYyErpIWxEsHn1xnhuSlJsm9JQ0l0Z1n
Hs9zTsQuCX43hjL/efnNRuNPGqK/wwzGCtVRIzZQD+IupYugqcfwUvnTaV+NJoVb
cTnnuFeHqQObEw9YGljPyNgl8ghTv7wgMNhMzAwsZROIEVxF2tvRzovTIM32LuJU
6cTS7KN84cOZXnGvWQTmayg4lL0gKUsjprB8eCnroxzPNKCUdFJDYI73GFeQouEB
6Ydp8yF6Ids17GiQf2+SFJI8txG7eCNFN/5Rhc+bJ51uTmo/6PIFMgwFjBooppAx
i2cdNBYPhQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFKcP4dBHPUwgUpk2P0V88Us+
wUajMB8GA1UdIwQYMBaAFDms/Uj6UbkHYEUJK/MxLLE5CyxTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBhZWI0ZjQwMTgwYWY2NzNjZmMwMTU3LzAv
MzlBQ0ZENDhGQTUxQjkwNzYwNDUwOTJCRjMzMTJDQjEzOTBCMkM1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzAwNmIyYWEwLWJkNzgtNDNiNC05N2MxLWRiNGJkMTc2MWQ2NS9mY2Iy
MGY1OTY2MmI4ZWFmOWYwYjIxYjVmODkwMzM5MGU3YmE4Y2FiYTlhODE2MjgwNC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwYWViNGY0MDE4MGFm
NjczY2ZjMDE1Ny8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzUzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBxcukisDRAXN6lavz8V5nnSqd61aHab76U22Sii7UD
q9kaHx/23DSzEKqHGl/2yj67p4HyFHHlSQOms1N+oUB8fNfPoSdOjXrwQWwKgI7j
7VK5uy6fdME8Wsx68A8AxH25jHpzZB6r8WJoQ6QrI6LD4ZHj7/fvfQRNxZEnJ2rD
PPzkFDxu5d7MjpB1PpqsIxyvMt67AlCTHuCVDGP3QWE7wYuLrUqWfu0KYjZAs6pE
jrvS+4JSQEZ0xtCPwIgPlOhEIZ7nFxBxXuHJ/r/kOy1+lcrAkoFULDrtTzhxGauU
ODZLbWpZGYCThB0mPIYOMQI5uFEJOJQiIvnRAhRwesCP
-----END CERTIFICATE-----